SEC Proposes Crypto Custody Rule: What Investment Advisers and Funds Must Know
The U.S. Securities and Exchange Commission has released a 760-page proposed rule that, for the first time, draws a clear regulatory boundary around how investment advisers and regulated funds must hold client crypto assets. For accounting firms, auditors, and CFOs supporting registered investment vehicles, the proposal ends years of interpretive ambiguity and replaces it with concrete obligations around custodian eligibility, recordkeeping, disclosure, and, in limited cases, self-custody. A 60-day public comment period is now open.
Why the SEC Is Acting Now
Existing custody rules were written for traditional securities: shares, bonds, and cash equivalents held at banks or broker-dealers. SEC Chairman Paul Atkins acknowledged as much in his statement accompanying the proposal, describing the legacy framework as one that considered "the custody and safekeeping only of traditional assets," which he called "an untenable situation in the 21st century."
The crypto custody proposal is the third major piece of the SEC's current digital asset agenda. It follows the agency's Innovation Exemption, which laid out pathways for tokenising traditional securities on a blockchain, and Regulation Crypto Asset, which addressed how companies can raise capital using digital assets within the federal securities framework. With this custody release, the SEC has now addressed every major topic on the digital asset agenda that Chairman Atkins originally set out.
Timing and leadership context
The proposal was published the day before Commissioner Hester Peirce, who led the agency's Crypto Task Force from its inception, departed the SEC to take up an academic post in Virginia. Her exit leaves the commission with only two sitting commissioners. To preserve operational continuity, the SEC has amended its quorum rules: where at least three commissioners were previously required to take official action, two now suffice. If one of those two commissioners is conflicted out of a particular matter, the single remaining commissioner can constitute a quorum. Firms tracking the agency's pace of rulemaking should note that this structural change is designed to prevent a standstill, not slow things down.
Core Elements of the Proposed Rule
The proposal addresses four interconnected areas: who can act as a qualified custodian, what happens when no qualified custodian is available, what records must be kept, and what must be disclosed to regulators and clients.
Qualified custodian eligibility
The rule would clarify which types of entities are permitted to hold crypto assets on behalf of advisory clients and regulated funds. State-chartered trust companies are explicitly included in the eligible custodian category, a meaningful expansion given that several of the most active crypto custodians in the U.S. operate under state trust charters rather than federal banking licences. Firms currently relying on custodians whose regulatory status was unclear under the prior framework will need to reassess whether their existing arrangements satisfy the new definition.
Self-custody: narrow, conditional, and temporary
One of the more novel elements of the proposal is a limited self-custody pathway for investment advisers. The term is used here in an asset management context, not in the consumer sense of holding one's own private keys. Under the proposal, an adviser may hold client crypto assets directly, but only if a qualified custodian willing to accept those assets cannot be found. An SEC official noted that this circumstance would likely be rare once the rule is in effect, but acknowledged it could apply in practice to a newly launched token that custodians have not yet onboarded.
The self-custody option is not open-ended. The adviser must demonstrate the expertise required to hold the assets securely, and the arrangement must be reviewed every quarter to determine whether a qualified custodian has since become available. Once one has, the adviser must transfer custody. The provision originated from an industry request submitted to the Crypto Task Force, and its inclusion signals that the SEC is willing to accommodate operational realities in early-stage token markets, albeit with a clear sunset mechanism.
Recordkeeping and disclosure obligations
The proposal introduces specific recordkeeping requirements tied to digital asset custody arrangements. Investment advisers and funds will need to maintain records that demonstrate how client crypto assets are held, by whom, and under what authority. Federal disclosure obligations will also be updated to require that custody arrangements be reported to the relevant regulators. The precise technical standards for these records are set out in the full proposal and are open for comment, meaning firms have an opportunity to shape the final requirements before they are locked in.
Accounting and Audit Implications
The custody proposal does not sit inside the FASB or IASB standard-setting process, but it has direct consequences for how crypto assets appear on financial statements and how auditors approach the custody assertion in an audit of a registered fund or investment adviser.
Balance sheet presentation and the custody assertion
Under ASC 350-60, the current U.S. GAAP framework for crypto assets, entities measure bitcoin and other in-scope tokens at fair value with changes recognised in net income. That measurement standard is well established, but the custody assertion has remained a grey area: auditors have had to rely on ad hoc procedures because no regulatory definition of a "qualified custodian" for crypto existed. The SEC's proposed definition fills that gap and gives auditors a clearer framework for testing whether assets reported on a fund's balance sheet are genuinely held by an eligible custodian or whether an alternative arrangement, such as the proposed self-custody pathway, applies.
For accounting firms preparing or auditing crypto financial statements for registered funds, the practical question is whether the custodian named in the fund's books satisfies the new eligibility criteria. State-chartered trusts are now confirmed as eligible; arrangements that fall outside the defined categories will require either restructuring or a documented self-custody justification. This is also relevant context for firms working through FASB derecognition questions for wrapped tokens and lending, where custody and control are already under scrutiny.
Quarterly review cycles and period-end close
The mandatory quarterly review of self-custody arrangements creates a new calendar obligation for compliance and finance teams. Each quarter-end, any adviser relying on the self-custody provision must formally assess custodian availability. That assessment needs to be documented and, depending on how the final recordkeeping rules are framed, may need to be disclosed. Finance teams building their period-end close calendars should reserve time for this review, and auditors should plan to request the documentation as standard in any engagement covering a fund using self-custody.
IFRS reporters and cross-border fund structures
Investment advisers managing funds that report under IFRS, or those operating across jurisdictions, face an additional layer of complexity. IFRS does not yet have a dedicated crypto asset standard; entities typically apply IAS 38 (intangible assets) or, for commodity-broker traders, IAS 2. The SEC's custodian eligibility framework does not map directly onto IFRS derecognition or disclosure requirements, but it does affect the facts underlying those assessments. If a fund holds crypto through a state-chartered trust custodian, for example, the nature of that arrangement, including whether the fund retains the risks and rewards of ownership, needs to be assessed under whichever IFRS framework applies. Cross-border structures should obtain local legal opinions on whether the proposed custodian categories satisfy the relevant jurisdiction's asset-segregation rules.
What Firms Should Do Before the Comment Period Closes
The 60-day comment window is not just a formality. It is the most direct opportunity for accounting firms, auditors, and CFOs to shape the final rule's recordkeeping and disclosure requirements. At the same time, the window is short enough that preparatory work needs to begin immediately.
Immediate steps for compliance and finance teams
First, map your current custody arrangements. For every registered fund or advisory account that holds crypto assets, identify the custodian, its regulatory charter, and whether it would qualify under the proposed definition. State-chartered trusts are explicitly in; other arrangements need legal review.
Second, assess self-custody exposure. If any advisory accounts are currently holding client crypto assets directly, document the rationale and determine whether the proposed expertise and quarterly-review requirements can be met. If not, begin the process of identifying a qualified custodian now rather than after the rule is finalised.
Third, review disclosure infrastructure. The proposal will update federal disclosure obligations. Work with legal counsel to understand which existing filings will need to be amended and whether your current systems can capture the required custody data in the format regulators will expect.
Fourth, engage the comment process. The SEC's proposals at this stage are genuinely open for input. Practical feedback on recordkeeping formats, custodian onboarding timelines, and the workability of the quarterly self-custody review cycle can influence the final rule. Trade bodies representing investment advisers and accounting firms are likely to coordinate submissions; firms should consider contributing their operational experience.
This proposal sits within a broader SEC regulatory push that is reshaping the landscape for digital asset compliance. For context on how the rulemaking pipeline has developed, see our earlier coverage of SEC and CFTC crypto rulemaking after the CLARITY Act stall, and our crypto compliance reporting pillar for the full framework.
Frequently Asked Questions
Does the proposed rule apply to all investment advisers holding crypto for clients?
The proposal targets SEC-registered investment advisers and regulated funds that hold crypto assets on behalf of clients. Advisers not registered with the SEC, or those whose clients hold no crypto assets, are outside its immediate scope. That said, state-registered advisers should monitor whether their state regulators adopt parallel requirements.
What makes a custodian "qualified" under the proposal?
The proposal sets out eligibility criteria that include banks, certain broker-dealers, and, notably, state-chartered trust companies. The full definitional requirements are in the 760-page proposal and are subject to the comment process, so the final list of eligible entity types may shift before the rule is adopted.
How does self-custody work under the proposed rule, and when can an adviser use it?
An adviser may hold client crypto assets directly only if no qualified custodian is willing to accept those assets. The adviser must have the required expertise to do so safely, and the arrangement must be reviewed every quarter. If a custodian becomes available, the self-custody arrangement must end. The SEC expects this pathway to be used rarely, though it may apply to newly launched tokens.
How does the proposed custody framework interact with ASC 350-60 fair value reporting?
ASC 350-60 governs how crypto assets are measured and presented on U.S. GAAP financial statements. The custody proposal does not change the measurement standard, but it defines the custody arrangement that auditors will need to test when assessing the existence and completeness of crypto assets on a fund's balance sheet. A clearer custodian definition means a more structured audit approach to the custody assertion.
When might the rule take effect, and what should firms do right now?
The rule is in its proposed stage with a 60-day comment period. After comments close, the SEC will review submissions and may issue a final rule, potentially with amendments. There is no confirmed effective date yet. In the interim, firms should map existing custody arrangements against the proposed criteria, assess any self-custody exposure, and consider submitting comments on recordkeeping and disclosure requirements that affect their operations.
Source: CoinDesk Policy